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What is claimed is: 

1. A private data protection distribution 
method, comprising : 

5 receiving encrypted private data; 

receiving an encrypted private data use license 
which describes a decryption key for decrypting the 
private data, and a use condition of the private data; 

decrypting the decryption key and the private data 
10 use license; 

determining whether or not a use purpose of the 
private data matches the use condition described in the 
private data use license; and 

decrypting the private data by using the decrypted 
15 decryption key only if the use purpose of the private 
data matches the use condition. 

2. The private data protection distribution 
method according to claim 1, wherein 

20 the decryption key and the private data use 

license are encrypted and decrypted by using a DRM 
authentication technology. 

3. The private data protection distribution 
25 method according to claim 2, wherein 
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a mechanism for decrypting the private data use 
license by using a DRM authentication technology is 
implemented as a TRM. 

5 4. The private data protection distribution 

method according to claim 1, wherein 

the use condition of the private data use license 
includes at least any of an expiry date, a number of 
available times, a use purpose, and a number of move 
10 times of the private data use license. 

5. The private data protection distribution 
method according to claim 4, wherein 

the use purpose includes a restriction on an 
15 application which uses the private data. 

6. The private data protection distribution 
method according to claim 1, further comprising: 

receiving the encrypted private data, and the 
20 encrypted private data use license which describes the 
decryption key for decrypting the private data, and the 
use condition of the private data from a plurality of 
information entities; 

creating a name list license by concatenating a 
25 plurality of private data use licenses which have same 
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conditions; and 

creating a name list by concatenating encrypted 
private data which correspond to the private use 
licenses used to create the name list license. 

7. The private data protection distribution 
method according to claim 6, wherein 

the encrypted private data can be decrypted with 
a decryption key possessed by an information entity that 
transmits the private data. 

8. The private data protection distribution 
method according to claim 6, wherein 

if the private data is provided to a different 
15 information device, at least any one of a name, a type, 
a use purpose, and an inquiry destination of an 
organization which manages a different information 
device to which the private data is provided, and a 
provided item list of a private data database is created 
20 for each information entity, and disclosed to a 
corresponding information entity depending on need. 
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9. The private data protection distribution 
method according to claim 8, further comprising: 
25 receiving corrected contents if a correction is 
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made to at least one of the encrypted private data, and 
the private data use license which describes the 
decryption key for decrypting the private data, and the 
use condition of the private data; and 
5 transmitting the corrected contents to a 

different information device to secure sameness of the 
private data and the private data use license, 

10. A private data protection distribution 
10 program for causing a computer to execute a process, 
the process comprising: 

receiving encrypted private data; 

receiving an encrypted private data use license 
which describes a decryption key for decrypting the 
15 private data, and a use condition of the private data; 

decrypting the decryption key and the private data 
use license; 

determining whether or not a use purpose of the 
private data matches the use condition described in the 
20 private data use license; and 

decrypting the private data by using the decrypted 
decryption key only if the use purpose of the private 
data matches the use condition. 

25 11. A private data protection distribution 
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apparatus, comprising : 

a unit receiving encrypted private data; 

a unit receiving an encrypted private data use 
license which describes a decryption key for decrypting 
5 the private data, and a use condition of the private 
data; 

a unit decrypting the decryption key and the 
private data use license; 

a unit determining whether or not a use purpose 
10 of the private data matches the use condition described 
in the private data use license; and 

a unit decrypting the private data by using the 
decrypted decryption key only if the use purpose of the 
private data matches the use condition. 
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